This article describes how to enable Secure Ticket Authority (STA) logging on the STA servers only in XenApp environments.

Requirements

• Secure Gateway or Access Gateway

• Web Interface

Background

There are issues when an SSL Error is displayed to a user when attempting to launch a published application through Secure Gateway or Access Gateway (when used as a Secure Gateway replacement). Sometimes this occurs when Secure Gateway or Access Gateway has trouble performing the STA ticket validation with the STA server.

Note: Refer to the Secure Gateway or Access Gateway Administrator’s Guide for the application launch process.

To determine whether the Secure Gateway or Access Gateway is able to successfully perform the ticket validation to the STA server, detailed logging can be enabled on the STA servers.

Instructions

Complete the following steps:

If the XML Service is not being shared with IIS, perform the following task:

1. On the STA server(s), navigate to \\<systemroot>\Program Files (x86)\Citrix\Systems32.

2. Open CtxSta.config in Notepad or Wordpad.

3. Change LogLevel=3 and save the file.

4. Restart the Citrix XML Service on the STA server.

5. Log on through the Secure Gateway or Access Gateway and attempt to start the application. By default, the STA logs are written to \\<systemroot>\Program Files (x86)\Citrix\logs.

If the XML Service is being shared with IIS, perform the following task:

1. On the STA server(s), navigate to \\<systemroot>\Inetpub\scripts.

2. Open CtxSta.config in Notepad or Wordpad.

3. Change LogLevel=3 and save the file.

4. Restart the IIS Admin Service on the STA server.

5. Log on through the Secure Gateway or Access Gateway and attempt to launch the application. By default, the STA logs are written to \\<systemroot>\Program Files (x86)\Citrix\logs.

• CTX101997 - Citrix Secure Gateway Secure Ticket Authority Frequently Asked Questions to find out how to interpret the STA log files.
• CTX224582 - How to Enable STA Logging in Citrix Virtual Apps and Desktops